CVE-2026-102140: Kiteworks: güvenlik açığı

Açıklama (NVD)

An authenticated administrator could initiate an administrative import using a file whose contents were not fully verified, because the import validated only the file's header rather than the complete file. This could allow unverified or forged content to be accepted and processed, affecting the integrity of the imported data.

Özet bilgiler

Ürün

Accellion Kiteworks

CVSS v3.1

4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

EPSS

%0,14 (yüzdelik 3)

CWE

CWE-345

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• github.com
• raw.githubusercontent.com
• CWE-345